ITPEC FE Morning October 2022 Question 43

To confirm that the message has not been falsified — a message authentication code (MAC) checks integrity and the sender, not secrecy.

The sender computes a short code from the message and a secret key shared with the receiver (HMAC, for example, uses a hash function) and sends it with the message. The receiver recomputes the code with the same key; if the two match, the message was not altered on the way and came from someone holding the key.

The message itself travels as it is: a MAC does not encrypt anything.

Answer (c)

Why not others:

• •(a) — a MAC says nothing about how, or whether, a message was encrypted; it is computed over the message whatever the encryption
• •(b) — checking a summary of the content is not a security function; a MAC is a fixed-length value that reveals nothing readable about the message
• •(d) — confidentiality comes from encryption; a message with a MAC can still be read by anyone who intercepts it

Key rule: Encryption protects confidentiality; a MAC or a digital signature protects integrity, and only a signature, made with a private key, also gives non-repudiation.

Security · AI-written, may contain errors